echo
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive and standard best practices for the Echo Go web framework. It recommends secure setups including the use of security headers, rate limiting, and CSRF protection through standard middleware.- [INDIRECT_PROMPT_INJECTION]: The skill describes handling HTTP request data (query parameters, form values, and body binding), which represents the standard attack surface for web applications. The skill correctly instructs the agent and developers to use strict validation patterns using
go-playground/validatorand to avoid exposing internal models directly to mitigate risks associated with untrusted data ingestion.- [DATA_EXPOSURE]: The documentation correctly identifies environment variables and.envfiles as the standard method for configuration and secret management, ensuring that sensitive information like JWT secrets or database credentials are not hardcoded in the application logic.
Audit Metadata